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Top Stories 

• America First Credit Union in Utah canceled debit card PINs and reissued debit cards 
starting May 29 for around 20,000 customers after it became aware of a data breach. - 
KTVX 4 Salt Lake City (See item 3) 

• The Pennsylvania Department of Transportation reported that southbound lanes of 
Interstate 8 1 in Chambersburg were shut down for more than 9 hours May 30 after a semi- 
truck rolled over, spilling a corrosive chemical. - Chambersburg Public Opinion (See item 

6) 

• An evacuation order remained in effect May 30 for about 300-350 people following a May 
29 fire that destroyed an East Texas Ag Supply warehouse in Athens, Texas. - KXAS 5 
Fort Worth; Associated Press (See item 9) 

• iSight Partners researchers released a report stating that attackers from Iran created a 
cyberespionage campaign targeting government officials, diplomats, the U.S. military, and 
Washington, D.C. journalists by creating fake online personas. - Threatpost (See item 15) 
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Energy Sector 



Nothing to report 



[ Return to top] 

Chemical Industry Sector 

1. May 30, South Jersey Times - (New Jersey) Paulsboro train derailment, chemical 
spill caused health prohlems in half of residents, DOH reports. A report released 
May 22 by the New Jersey Department of Health and the Agency for Toxic Substances 
and Disease Registry, stated that a survey conducted by the agencies found that a 
majority of Paulsboro residents reported new or worsening health problems, including 
upper respiratory issues, headaches, and asthma following a November 2012 train 
derailment and vinyl chloride spill in the borough. The survey included data on 1,930 
Paulsboro residents and was conducted via in-person and mailed surveys in December 
2012 . 

Source: http : //w w w . n j . com/glouces ter- 

countv/index.ssf/2014/05/paulsboro train derailment caused health problems in half 
of residents doh report says.html 

For additional stories, see items 6 and 9 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

2. May 30, Associated Press - (National) Ford issues 4 recalls affecting 1.4M vehicles. 
Ford announced four recalls May 29 covering around 1.4 million vehicles, with the 
largest recall affecting 915,000 model year 2008-201 1 Ford Escape and Mercury 
Mariner vehicles due to a torque sensor issue that could cause a loss of power steering. 
Other recalls involved 196,000 model year 201 1-2013 Ford Explorer vehicles, 196,600 
model year 2010-2014 Ford Taurus vehicles, and 82,500 model year 2006-2011 Ford 
Fusion, Mercury Milan, and Lincoln Zephyr and MKZ vehicles. 

Source: http://news.msn.com/us/ford-issues-4-recalls-affecting-14m-vehicles 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

3. May 29, KTVX 4 Salt Lake City - (Utah) America First Credit Union finds a breach 
in accounts that affects thousands. America First Credit Union in Utah canceled debit 
card PINs and reissued debit cards starting May 29 for around 20,000 customers after it 
became aware of a data breach that occurred between October 2013 and February 2014. 
Source: http://www.good4utah.com/storv/d/storv/america-first-credit-union-finds-a- 
breach-in-accou/50239/gdD6BQR9hUmGvHqjfMcQBw 

4. May 29, Chicago Tribune - (Illinois) FBI: ‘Two-Timer Bandit’ strikes again. The 
FBI reported that a man who robbed a Charter One Bank branch in Chicago May 27 is 
believed to be a suspect known as the “Two-Timer Bandit” responsible for at least two 
other bank robberies and an attempted bank robbery in the Far West Side area of the 
city. The suspect was reported to have an accomplice in the robberies. 

Source: http://www.chicagotribune.com/news/local/breaking/chi-fbi-twotimer-bandit- 
strikes-again-20140528,0,3 138649. story 

5. May 29, WATE 6 Knoxville - (Tennessee) Knoxville hotel owner faces federal fraud 
charges. A former Knoxville hotel owner was charged May 29 for allegedly using false 
tax return information to obtain $5.8 million in loans from First Community Bank of 
East Tennessee. 

Source: http://www.wate.com/storv/25647706/knoxville-hotel-owner-faces-federal- 
fraud-charges 

[ Return to top] 

Transportation Systems Sector 

6. May 30, Chambersburg Public Opinion - (Pennsylvania) Overturned trailer closes I- 
81, prompts hazmat cleanup. The Pennsylvania Department of Transportation 
reported that southbound lanes of Interstate 8 1 in Chambersburg were shut down 
between exit 14 and exit 10 for more than 9 hours May 30 after a semi-truck rolled 
over, spilling a corrosive chemical that had to be cleaned up by HAZMAT before the 
highway was reopened. 

Source: http://www.publicopiniononline.com/local/ci 25864240/overturned-trailer- 
shuts-down-i-81 -southbound 

7. May 29, Phoenix Arizona Republic - (Arizona) Fatal Arizona crash closes Phoenix- 
to-Vegas highway. A crash involving a semi-truck May 29 forced the closure of U.S. 
93 about 35 miles north of Wickenburg in both directions for more than 2 hours while 
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the southbound lanes remained closed until the wreckage was cleared. 

Source: http://www.azcentral.eom/storv/news/arizona/2014/05/29/arizona-fatal-crash- 
us-93-fatal-wreck-abrk/97 12463/ 



8. May 29, Reuters - (Massachusetts) U.S. charges five Boston airline employees with 
smuggling cash. Five employees of Jet Blue Airways Corp. and Delta Airlines Inc., 
were charged May 29 with allegedly smuggling about $417,000 through airport 
checkpoints out of Boston’s Logan International Airport to Florida between August 
2012 and February 2014. 

Source: http://news.msn.com/crime-iustice/us-charges-five-boston-airline-emplovees- 
with-smuggling-cash- 1 

[ Return to top] 

Food and Agriculture Sector 

9. May 30, KXAS 5 Fort Worth; Associated Press - (Texas) Hundreds evacuated after 
fire at fertilizer storage facility. An evacuation order remained in effect May 30 for 
about 300-350 people who reside within a 5-block radius of the East Texas Ag Supply 
fertilizer storage facility in Athens, Texas, following a May 29 fire that destroyed the 
warehouse. No explosions or injuries were reported as a result of the blaze, and 
officials will test air quality before residents can return home. 

Source: http://www.nbcdfw.com/news/local/Large-Fire-at-Fertilizer-Storage-Facility- 
in-Athens-261174271.html 

[ Return to top] 

Water and Wastewater Systems Sector 

10. May 30, KTVI 2 St. Louis - (Illinois) Illinois American Water, Jersey Co. Rural 
Water issues boil order. Hundreds of Illinois Water’s Alton District customers and 
Jersey County Rural Water customers were placed under a boil-water order May 30 
after a water main break in Madison County, Illinois. Officials will lift the order once 
safe water quality samples are confirmed. 

Source: http://fox2now.eom/2014/05/30/illinois-american-water-issues-boil-order-to- 
alton- godfrey- grafton-and-elsah/ 

11. May 29, KOMU 8 Columbia - (Missouri) Water main break causes boil order. 
Residents in New Franklin, Missouri, were put under a boil advisory until further notice 
May 29 after the city’s main water main broke. New Franklin is currently using 
Howard County water to refill the city’s water tower. 

Source: http://www.komu.com/news/water-main-break-causes-boil-order-5717Q/ 

12. May 29, WDSU 6 New Orleans - (Louisiana) Boil water advisory issued for Folsom. 
Authorities in Lolsom, Louisiana, issued a boil-water advisory until further notice after 
the area’s water supply experienced problems with its system. 

Source: http://www.wdsu.com/news/local-news/new-orleans/boil-water-advisory- 
issued-for- folsom/26229220 
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Healthcare and Public Health Sector 

13. May 30, Associated Press - (Massachusetts) Burst pipe leads to evacuation of 
Spaulding Skilled Nursing Center in Boston. Hospital officials reported that 56 
patients were transferred to other facilities when a water pipe burst at the Spaulding 
Skilled Nursing Center in Boston May 30, prompting water to be shut off for an 
undetermined amount of time. 

Source: 

http://www.masslive.com/news/boston/index.ssf/2014/05/burst pipe leads to evacuati 
on.html 



14. May 29, Associated Press - (North Carolina) NC Veteran center declared safe after 
bomb threat. Patients and staff members at the North Carolina Veterans Affairs 
Medical Center in Fayetteville were evacuated and the building was locked down for 
about 2 hours May 29 after a phoned bomb threat. Police conducted a search and 
cleared the scene after nothing suspicious was found. 

Source: http://abcnews.go.com/US/wireStorv/nc-veteran-hospital-locked-bomb-threat- 
23911217 
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Government Facilities Sector 

15. May 29, Threatpost - (International) Iranian campaign snooped on U.S. officials. 
iSight Partners researchers released a report stating that attackers from Iran created and 
ran a sophisticated cyberespionage campaign since at least 2011 targeting government 
officials, diplomats, U.S. military members, and Washington, D.C. journalists by 
creating fake online personas as reporters, defense contractors, and politicians. The 
attackers were allegedly able to access systems and gather information as well as email 
and network logins. 

Source: http://threatpost.com/iranian-campaign-snooped-on-u-s-officials 

16. May 29, WTVR 6 Richmond - (Virginia) 10 students taken to hospital following bus 
crash. An accident involving a Fairfield Court Elementary School bus caused 10 
students to be transported to an area hospital with injuries after a vehicle collided with 
the bus in Richmond May 29. 

Source: http ://wtvr. com/20 1 4/05/29/ 1 0-students-taken-to-hospital-following-bus-crash/ 

17. May 29, WCPO 9 Cincinnati - (Ohio) Students safe, released after school bus 
hazmat. A HAZMAT crew determined an unknown substance which caused two 
students aboard a Little Miami Schools’ bus in Harlan Township, Ohio, to be 
transported to an area hospital, was not dangerous after the white particles were found 
on the floor of the bus May 29. The students were evacuated from the bus while parents 
waited about 3 hours for the scene to clear. 

Source: http://www.wcpo.com/news/local-news/white-substance-on-school-bus- 
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prompts -hazmat 
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Emergency Services Sector 

18. May 29, Pensacola News Journal - (Florida) Gas leak reported at Escambia County 
main jail. Employees in the main kitchen of Escambia County Main Jail on North E 
Street in Pensacola were evacuated May 29 after workers preparing food detected a 
natural gas odor, causing service to be shut off and the kitchen to remain closed until 
the value on the line is replaced. Jail officials stated that food preparation services were 
not expected to be interrupted. 

Source: http://www.pni.eom/storv/news/2014/05/29/gas-leak-reported-at-escambia- 
iail/9731169/ 
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Information Technology Sector 

19. May 30, IDG News Service - (International) New attack methods can ‘brick’ 
systems, defeat Secure Boot, researchers say. A security researcher at Mitre 
demonstrated at the Hack in the Box 2014 conference that the Unified Extensible 
Eirmware Interface (UEEI)’s Secure Boot mechanism can be bypassed on around half 
of computers in order to install bootkits. The researcher also demonstrated that a 
specific UEEI variable could be modified directly from the computer’s operating 
system to make the system unusable. 

Source: 

http://www.computerworld.eom/s/article/9248699/New attack methods can 39 brie 
k 39 systems defeat Secure Boot researchers say 

20. May 30, Help Net Security - (International) Malware creation breaks all records! 
160,000 new samples every day. Panda Security reported that new malware creation 
occurred at record rates during the first quarter (Ql) of the year, with more than 15 
million new samples observed during Ql. The researchers found that trojans made up 
71.85 percent of new samples, and that some of the largest data thefts ever occurred 
during Ql, among other findings. 

Source: http://www.net-securitv.org/malware news.php?id=2776 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



Nothing to report 
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Commercial Facilities Sector 

21. May 30, Boulder Daily Camera - (Colorado) Boulder police shoot suspect in Hill 
standoff following dispute over cab fare. A University Hill apartment building and 
several surrounding residences in Boulder, Colorado, were evacuated for more than 2 
hours May 30 after a gunman ran into the apartment building and fired shots at police 
officers responding to a previous dispute. The suspect was shot multiple times and two 
officers received minor injuries during the incident. 

Source: http://www.denverpost.com/breakingnews/ci 25862389/suspect-shot-2- 
boulder-officers-receive-minor-injuries 

22. May 30, Providence Journal - (Rhode Island) Crews responded to fire in store at 
Providence Place mall. Firefighters responded to the LensCrafters store at Providence 
Place mall in Rhode Island May 29 when a machine used to make glasses caught fire 
after the mall had closed. The store remained closed May 30 until Health Department 
officials can determine its reopening. 

Source: http://www.providenceioumal.eom/breaking-news/content/20140530-crews- 
responded-to-fire-in-store-at-providence-place-mall.ece 

23. May 30, WCCO 4 Minneapolis - (Minnesota) Crews battle 3-alarm fire at Brooklyn 
Park apartments. More than 50 residents from 36 units were evacuated for several 
hours May 30 from the Moonraker Apartments complex in Brooklyn Park due to a 3- 
alarm fire that started on the second floor and spread through the building. At least 12 
residents were displaced by the fire. 

Source: http://minnesota.cbslocal.eom/2014/05/30/crews-battle-3-alarm-fire-at- 
brooklyn-park-apartments/ 

24. May 29, WAVY 10 Portsmouth - (Virginia) Four-story hotel evacuated due to Freon 
leak. The Savannah Suites hotel in Hampton, Virginia, was evacuated May 29 due to a 
Freon leak stemming from an air-conditioning unit inside a work room. Crews 
ventilated the building and tested the air quality before guests were allowed to reenter 
the building nearly 3 hours later. 

Source: http://wavv.eom/2014/05/29/four-storv-hotel-evacuated-due-to-freon-leak/ 

25. May 29, KOLO 8 Reno - (California) South Lake Tahoe shopping center evacuated 
due to bomb threat. The Raley’s shopping center in South Lake Tahoe was evacuated 
for about 2 hours May 29 after a store employee overheard two individuals say they 
planned to plant a device before they left the store. Bomb squad officials searched the 
mall, including a cluster of mailboxes where there were reports of a ticking noise, and 
cleared the scene after finding no explosive devices. 

Source: http://www.kolotv.com/news/californianews/headlines/South-Lake-Tahoe- 
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Shopping-Center- Evacuated-Due-To-Bomb-Threat-26 1 1 6268 1 .html 
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Dams Sector 



Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://w'W'vv'. dhs.gov/IPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support® govdeliverv.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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